Audits vuln-scanner security PR and disclosure lifecycle status against live GitHub data.
npx skills add https://github.com/aaronjmars/aeon --skill vuln-tracker
Please help me install this Agent Skill. Skill: Vuln Tracker Source: https://github.com/aaronjmars/aeon/tree/main/skills/vuln-tracker Command: npx skills add https://github.com/aaronjmars/aeon --skill vuln-tracker
Vuln Tracker prevents security disclosures and PRs created by vuln-scanner from silently rotting by auditing their daily lifecycle state and surfacing anything that needs operator attention.
Ask your autonomous agent to run the Vuln Tracker daily to update memory/topics/vuln-followup.md and produce an operator notification only when there is meaningful movement or actionable items.
High-intent search queries and answers about installing and using this skill.
Vuln Tracker audits security PR lifecycle status by reconciling saved scan history with current GitHub pull request state. It categorizes merged outcomes, maintainer response gaps, and stale openings across multiple repositories to surface actionable items.
Security disclosures go stale when they lack continuous lifecycle auditing. Vuln Tracker prevents silent rot by cross-referencing vuln-scanner history with live GitHub state to detect aging PRs and maintainer questions needing immediate replies.
Automate daily monitoring by running Vuln Tracker to deterministically re-probe GitHub pull request and advisory state. It backfills missing scan history by searching bot-authored security PRs and rewrites an operational dashboard with categorized queues.
Yes, you need authenticated GitHub CLI access via GH_TOKEN to audit vulnerability management workflows. Vuln Tracker requires this token to perform deterministic re-probing, categorization, and dashboard rewrite logic across your repositories.
Maintain a compliance dashboard by rewriting the operator-facing vuln-followup.md file with updated metrics. Vuln Tracker updates Stars Secured metrics and categorizes queues like needs answer, newly actionable, stale, and closed without merge to drive notifications.
Vuln Tracker handles queued or skipped disclosure conditions by applying deterministic categorization logic during its daily audit. It reconciles these states against current GitHub advisory data and organizes them into dedicated dashboard queues for operator review.
swarm-ai-researchCategorize vuln-scanner outputs with GitHub PR state and security advisories.
notqueClassify GitHub notifications into actionable work and informational noise.
Atrium-HermesCross-reference vuln-scanned.json with live GitHub state to surface action items.
aaronjmarsAudit pending vulnerability disclosure drafts and escalate aged items.
